Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f3e297805e0afa47f3fb131f55d513a7cfd6df11.roa
File:                     f3e297805e0afa47f3fb131f55d513a7cfd6df11.roa (raw, json)
Hash identifier:          BQatM16vvPXpPfg1En5JHJWCCONJPMPoXN6gmec0lGM=
Subject key identifier:   86:D5:10:C0:38:6C:29:B2:CD:EB:67:95:2D:03:4E:B1:4F:2F:74:60
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       1644A9
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f3e297805e0afa47f3fb131f55d513a7cfd6df11.roa
Signing time:             Thu 20 Jan 2022 13:46:59 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52323
IP address blocks:        181.16.212.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1459369 (0x1644a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=f3e297805e0afa47f3fb131f55d513a7cfd6df11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cb:11:01:7e:79:25:e7:a1:c0:25:0f:bc:34:
                    e2:27:70:c2:89:6d:fb:e0:9a:4e:d6:f8:68:c8:16:
                    da:53:f3:41:49:b1:3c:d3:24:1b:11:07:53:40:25:
                    ab:20:10:9d:64:ba:30:94:4c:31:44:43:8a:6a:de:
                    21:69:7d:5c:84:c0:c9:92:da:3a:b9:b6:c7:60:32:
                    3b:3c:48:1f:10:71:57:7d:1f:67:cd:62:63:56:58:
                    42:42:e4:8d:2a:2e:00:b9:ed:59:21:cf:8b:e8:fe:
                    8f:75:94:6c:0f:23:13:59:32:2d:4b:3f:ed:fe:49:
                    68:62:de:be:88:cf:1b:62:0d:71:1e:97:28:57:6c:
                    a1:ab:a8:c9:9b:a1:47:a4:33:f9:ae:8f:51:84:a6:
                    c6:53:5e:c5:fa:d4:61:e6:5d:dd:9b:8b:e3:b2:3c:
                    12:74:43:90:27:87:07:a6:24:5b:f0:91:e9:76:92:
                    54:42:5f:6e:36:2f:92:26:19:60:fc:80:a3:de:67:
                    25:d0:37:de:6e:de:aa:b6:d6:99:70:ce:e3:e1:88:
                    4b:49:3e:20:c9:a6:bb:f6:73:43:f6:15:99:e4:05:
                    52:1e:45:cc:42:93:d3:6c:b0:5b:1e:7e:4b:c4:0d:
                    e4:60:b1:0a:38:71:3f:2d:8c:cf:d8:3a:7a:97:27:
                    85:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D5:10:C0:38:6C:29:B2:CD:EB:67:95:2D:03:4E:B1:4F:2F:74:60
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f3e297805e0afa47f3fb131f55d513a7cfd6df11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:11:54:3f:3d:ee:8b:fa:60:4a:f8:33:47:5f:36:3a:cd:8e:
         07:4c:b2:ea:d8:a2:11:a3:76:7a:71:61:21:d8:9d:85:2d:77:
         d7:64:08:7f:e5:74:d1:35:de:67:82:e9:9c:df:f4:db:0b:52:
         20:b5:d7:f8:31:2d:03:17:20:2e:82:48:53:5a:77:6e:10:a0:
         4b:87:f2:d9:9e:b4:63:f5:0f:38:61:1a:75:c6:79:06:54:20:
         b6:87:3d:c5:88:66:13:e5:a9:5b:07:cd:ff:d9:1d:73:7d:f2:
         f2:70:0f:da:ba:ea:3d:8b:6d:26:8c:d6:a0:59:c7:2f:19:c9:
         88:7e:05:1c:7f:9b:9f:eb:23:05:59:fd:f8:27:c2:73:93:3f:
         8c:16:b2:32:5f:b3:71:00:fd:0c:b1:1f:00:76:7b:28:db:b8:
         ab:02:86:34:71:d5:a5:2f:6f:c8:39:f0:61:90:b7:a4:fa:05:
         c7:4c:fa:e0:a8:bc:aa:00:7f:8c:05:56:f5:33:32:98:86:d6:
         42:24:dc:0b:36:52:c5:6f:ff:63:91:6f:74:f8:40:d2:16:a3:
         39:b1:03:55:ed:47:1c:63:76:9e:05:86:b5:de:e2:ef:76:22:
         98:6d:6d:40:eb:56:23:fb:2d:e7:55:a7:89:b8:20:01:ce:7a:
         08:5c:16:b5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFkSpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhmM2UyOTc4MDVlMGFm
YTQ3ZjNmYjEzMWY1NWQ1MTNhN2NmZDZkZjExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo8sRAX55JeehwCUPvDTiJ3DCiW374JpO1vhoyBbaU/NBSbE8
0yQbEQdTQCWrIBCdZLowlEwxREOKat4haX1chMDJkto6ubbHYDI7PEgfEHFXfR9n
zWJjVlhCQuSNKi4Aue1ZIc+L6P6PdZRsDyMTWTItSz/t/kloYt6+iM8bYg1xHpco
V2yhq6jJm6FHpDP5ro9RhKbGU17F+tRh5l3dm4vjsjwSdEOQJ4cHpiRb8JHpdpJU
Ql9uNi+SJhlg/ICj3mcl0Dfebt6qttaZcM7j4YhLST4gyaa79nND9hWZ5AVSHkXM
QpPTbLBbHn5LxA3kYLEKOHE/LYzP2Dp6lyeFHQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIbVEMA4bCmyzetnlS0DTrFPL3RgMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3L2YzZTI5NzgwNWUwYWZhNDdmM2ZiMTMxZjU1ZDUxM2E3Y2ZkNmRmMTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArUQ1DANBgkqhkiG9w0BAQsFAAOCAQEALRFUPz3ui/pgSvgz
R182Os2OB0yy6tiiEaN2enFhIdidhS1312QIf+V00TXeZ4LpnN/02wtSILXX+DEt
AxcgLoJIU1p3bhCgS4fy2Z60Y/UPOGEadcZ5BlQgtoc9xYhmE+WpWwfN/9kdc33y
8nAP2rrqPYttJozWoFnHLxnJiH4FHH+bn+sjBVn9+CfCc5M/jBayMl+zcQD9DLEf
AHZ7KNu4qwKGNHHVpS9vyDnwYZC3pPoFx0z64Ki8qgB/jAVW9TMymIbWQiTcCzZS
xW//Y5FvdPhA0hajObEDVe1HHGN2ngWGtd7i73YimG1tQOtWI/st51WnibggAc56
CFwWtQ==
-----END CERTIFICATE-----